General

  • Target

    e771ff1e5015f88bdde618d2abf90b7cf21f38f051fd3f5bbb4f3a1677f49973N.exe

  • Size

    74KB

  • Sample

    241118-dgs8hsxclp

  • MD5

    d3dfbf8e06298424fc316903df5b5d90

  • SHA1

    636e3f66cfdb800ed9719fc307415792598cbe78

  • SHA256

    e771ff1e5015f88bdde618d2abf90b7cf21f38f051fd3f5bbb4f3a1677f49973

  • SHA512

    06d93555938b8c736206b299ab44f36fe0b6fc9f3009cf254d701804307d09e50f37abb23d3bef8bef19532b6745e3c66d56e476ed68a7d4cd3e074a463c49b7

  • SSDEEP

    1536:+Uk8RgDXz7Kx8zzgmTlvtKrNCpbXmsz4tHIK:Tk8yn7KdmTINQXzz4p

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      e771ff1e5015f88bdde618d2abf90b7cf21f38f051fd3f5bbb4f3a1677f49973N.exe

    • Size

      74KB

    • MD5

      d3dfbf8e06298424fc316903df5b5d90

    • SHA1

      636e3f66cfdb800ed9719fc307415792598cbe78

    • SHA256

      e771ff1e5015f88bdde618d2abf90b7cf21f38f051fd3f5bbb4f3a1677f49973

    • SHA512

      06d93555938b8c736206b299ab44f36fe0b6fc9f3009cf254d701804307d09e50f37abb23d3bef8bef19532b6745e3c66d56e476ed68a7d4cd3e074a463c49b7

    • SSDEEP

      1536:+Uk8RgDXz7Kx8zzgmTlvtKrNCpbXmsz4tHIK:Tk8yn7KdmTINQXzz4p

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks